Digital Asset Cyber and Fraud Risk Specialist - Vice President
Morgan Stanley is hiring a Digital Asset Cyber and Fraud Risk Specialist - Vice President in New York, United States. It pays $110k-$190k a year and Level rates it ; you can apply on Morgan Stanley.
Level's read on this job
- Little AI ●○○○ is how Level rates this cybersecurity role: aI is not part of the work.
- The posting mentions Fireblocks, cybersecurity and risk management among its tools and skills.
- Level classes it as an executive role.
- Morgan Stanley has 1,200+ other open roles on Level.
AI in this role
Seeking a Vice President to lead digital asset cyber and fraud risk management, focusing on custody technologies and security controls.
The Wealth Management (WM) Chief Data Office (CDO) sits within the WM Risk organization and strives to find the right balance between risk management and business enablement. WM CDO’s mission is to: prevent unauthorized access to or misuse of client sensitive data and assets; abide by relevant privacy laws and regulations; effectively retain, retrieve, and protect information and records at the Firm; and mitigate risks caused by inaccurate, untimely, or incomplete WM data.
The WM Application Security Team within WM CDO works to ensure that our clients’ sensitive data and assets are protected and that appropriate controls are applied across technology assets, including emerging digital asset capabilities.
Role Description
The WM Application Security Team seeks a Vice President to support digital asset risk management across cyber and fraud domains. This individual will help assess and enhance the control environment for enterprise digital asset custody technologies, including wallet architecture, key protection, secure signing mechanisms, and transaction policy controls designed to prevent unauthorized or unwanted transactions. The successful candidate will bring hands-on knowledge of enterprise custody operating models and specific familiarity with Fireblocks implementation, including workspace configuration, policy design, approval workflows, and supporting control considerations.
In addition to serving as a digital asset cyber risk officer, this role will partner closely with fraud, product, operations, technology, and business stakeholders to identify and assess blockchain- and crypto-specific fraud scenarios across custody, transfer, and tokenized asset use cases. The individual should be comfortable reviewing technology architecture diagrams and process flows, understanding the fraud and cyber implications of tokenized assets, and translating complex technical concepts into clear risk guidance for senior stakeholders while balancing risk remediation against business objectives.
Key responsibilities include:
· Leading the risk assessment and control review of enterprise digital asset custody capabilities, including Fireblocks, wallet architecture, account structures, governance, and operating processes
· Serving as a subject matter expert on key protection and secure signing mechanisms, including MPC- and HSM-based models, key generation and storage, rotation and recovery practices, and privileged access controls
· Evaluating transaction policy controls designed to prevent unauthorized or unwanted transactions, including approval workflows, allowlisting, velocity or value thresholds, segregation of duties, and exception handling
· Partnering with cyber, fraud, product, operations, and engineering stakeholders to identify blockchain- and crypto-specific fraud typologies and define preventive and detective controls
· Reviewing technology architecture diagrams, data flows, and integration patterns to identify cyber, fraud, and control design risks across digital asset platforms and supporting services
· Assessing the risk implications of tokenized asset products and processes, including issuance, custody, transfer, redemption, settlement, and on-chain or off-chain dependencies
· Supporting new product, platform change, and third-party risk reviews for digital asset and tokenization initiatives, ensuring alignment to the WM business risk appetite
· Defining and tracking metrics related to control coverage, policy exceptions, incidents, fraud trends, remediation progress, and residual risk
· Liaising with Morgan Stanley’s central cybersecurity, fraud, and risk organizations to interpret requirements and apply them effectively within the WM environment
· Clearly communicating risks, recommendations, and decisions to technology, business, and risk stakeholders
Qualifications:
· 7-10 years of relevant experience in cybersecurity, fraud risk, operational risk, technology risk, or digital asset risk management
· Experience with enterprise digital asset custody or wallet technologies and strong familiarity with Fireblocks implementation and associated governance or control frameworks
· Strong knowledge of key protection and secure signing mechanisms, including MPC, HSMs, key lifecycle management, approval workflows, and transaction signing controls
· Understanding of transaction policy frameworks used to prevent unauthorized or unwanted digital asset movements, including allowlists, thresholds, dual controls, and exception management
· Knowledge of blockchain- and crypto-specific fraud considerations, including account takeover, beneficiary or address manipulation, social engineering, scam exposure, and blockchain transaction finality
· Ability to interpret technology architecture diagrams, application flows, and system interfaces and identify the implications for cyber and fraud risk
· General knowledge of the tokenization ecosystem and risks associated with tokenized assets, smart contracts, issuers, service providers, and on-chain or off-chain operating models
· Solid foundation in cybersecurity principles, including architecture risk identification, vulnerability management, secure SDLC concepts, and control design assessment
· Ability to partner with stakeholders and drive complex initiatives to completion in a large matrixed organization
· Excellent written and verbal communication skills, with the ability to communicate clearly at all levels within the organization
· Exceptional critical thinking, problem-solving, and research skills, with the ability to independently manage multiple simultaneous workstreams and exhibit strong attention to detail
Preferred Qualifications
· Experience supporting digital asset, tokenization, or blockchain-related programs within a financial services environment
· Experience working with fraud strategy, investigations, transaction monitoring, or controls for payment or digital asset transaction flows
· Familiarity with blockchain analytics, wallet screening, sanctions controls, or other tools used to monitor digital asset activity in complex enterprise environments
· Experience with scripting, automation, or data analysis tools such as Python, SQL, or similar technologies
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Expected base pay rates for the role will be between $110,000 and $190,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.
How we rate this
Digital Asset Cyber and Fraud Risk Specialist - Vice President at Morgan Stanley rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Also common in cybersecurity jobs at this level
Pay
- This job starts at
- $110k
- Typical cybersecurity job
- $160k
This posting starts 31% below the typical cybersecurity job. See cybersecurity jobs
Questions you could be asked
- Tell me about a project where cybersecurity was part of your work. What did you do?
- Tell me about a project where risk management was part of your work. What did you do?
- Tell me about a project where fraud detection was part of your work. What did you do?
- Tell me about a project where blockchain was part of your work. What did you do?
- Walk me through how you've used Fireblocks in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Cybersecurity, Risk Management, Fraud Detection, Blockchain, and Fireblocks. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new cybersecurity jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Other roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step